5907 matches found
Security Bulletin: Due to use of IBM SDK, Java Technology Edition, IBM Tivoli Application Dependency Discovery Manager is vulnerable to multiple vulnerabilities.
Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition used by IBM Tivoli Application Dependency Discovery Manager TADDM. Vulnerability Details CVEID:CVE-2024-21094 DESCRIPTION: An unspecified vulnerability in Java SE related to the VM component could allow a remote...
DoS (Denial of Service) in Bitbucket Data Center
This High severity DoS Denial of Service vulnerability was introduced in versions 8.9.0, 8.19.0, and 9.3.0 of Bitbucket Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5, allows an unauthenticated attacker to cause a resource to be unavailable for its intended users ...
kernel: blk-mq: fix IO hang from sbitmap wakeup race
A possible IO hang from sbitmap wakeup race was found in the Linux kernel. This may lead to compromised Availability...
PT-2024-9484 · Advantech · Eki-6333Ac-2G +1
Name of the Vulnerable Software and Affected Versions: Advantech EKI-6333AC-2G versions 1.6.3 and earlier Advantech EKI-6333AC-2GD versions 1.6.3 and earlier Advantech EKI-6333AC-1GPO versions 1.2.1 and earlier Description: A security issue was discovered in the "lan apply" API of Advantech's...
kernel: blk-mq: fix IO hang from sbitmap wakeup race
A possible IO hang from sbitmap wakeup race was found in the Linux kernel. This may lead to compromised Availability...
edk2: Integer overflows in PeCoffLoaderRelocateImage
A flaw was found in the EDK2 package. This flaw allows an attacker to cause memory corruption due to an overflow via an adjacent network. This issue may lead to loss of confidentiality, integrity, and availability...
The vulnerability in the client and server implementations of the network file system (NFS) of the OpenBSD operating system allows a perpetrator to influence the confidentiality, integrity, and accessibility of data.
The vulnerability in the client and server implementations of the network file system NFS in the OpenBSD operating system is related to a memory reclamation error. Exploiting this vulnerability allows an attacker to influence the confidentiality, integrity, and accessibility of systems...
CVE-2024-2315
APTIOV contains a vulnerability in BIOS where may cause Improper Access Control by a local attacker. Successful exploitation of this vulnerability may lead to unexpected SPI flash modifications and BIOS boot kit launches, also impacting the availability...
kernel: net/sched: act_mirred: use the backlog for mirred ingress
A potential deadlock flaw was found in net/sched/actmirred.c in the Linux kernel. This may lead to compromised Availability...
kernel: scsi: sg: Avoid sg device teardown race
The bug is about a race condition in the Linux kernel's SCSI generic sg driver. The problem occurs during the removal of devices when the driver accesses a resource requestqueue that may have already been freed, leading to a NULL pointer dereference. This issue can result in system crashes,...
kernel: of: module: prevent NULL pointer dereference in vsnprintf()
A null pointer dereference vulnerability was found in vsnprintf when str and len parameters are passed to vsnprintf, which only allows passing a NULL ptr when the length is 0. This issue can result in a crash and damage to availability...
Huawei HarmonyOS Type Check Not Strict Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a type-checking laxity vulnerability, which stems from a type-checking laxity in the background task service module. An attacke...
CVE-2024-20536
A vulnerability in a REST API endpoint and web-based management interface of Cisco Nexus Dashboard Fabric Controller NDFC could allow an authenticated, remote attacker with read-only privileges to execute arbitrary SQL commands on an affected device. This vulnerability is due to insufficient...
CVE-2024-51522
Vulnerability of improper device information processing in the device management module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2024-51521
Input parameter verification vulnerability in the background service module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2024-51520
Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2024-51519
Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2024-51517
Vulnerability of improper memory access in the phone service module Impact: Successful exploitation of this vulnerability may affect availability...